API Authentication
Authenticate with API tokens or OAuth 2.0. Manage scopes and rotate keys.
4 min readapiauthoauth
API Tokens
Generate a token in Settings → API Tokens. Include in the Authorization header: `Bearer <token>`.
OAuth 2.0
Use client credentials flow for server-to-server. Authorization code flow for user-delegated access.
Scopes
Tokens can be scoped: read:recons, write:recons, read:breaks, admin, etc.
